What is Claimed is: 

1 1 . A system for facilitating secure communications over a network, wherein said 

2 network is accessed by a network interface receiving voice signals from a user and accessing 

3 and navigating said network in accordance with said received voice signals, said system 

4 comprising: 

5 a security module to facilitate retrieval of information from said user in the form of 

6 voice signals and to identify security related information received by said network interface 

7 from a secure network site in response to accessing said secure network site; 

8 a storage unit to store voice and security information associated with authorized users 

9 of said system; and 

10 a security system in communication with said security module and said storage unit 

1 1 to verify said user as an authorized system user based on a comparison of said user voice 

12 signals with said stored voice information and to retrieve said security information of said 

1 3 verified user from said storage unit and negotiate communication parameters with said secure 

14 network site in response to said identified security information received from said security 

1 5 module to facilitate secure communications over said network between that site and said 

16 network interface. 

1 2. The system of claim 1 wherein said network includes the Internet. 

1 3. The system of claim 1 wherein said network interface is in communication 

2 with a communications device located remotely of said network interface, and said security 

3 module facilitates retrieval of said user voice signals from said communications device. 

1 4. The system of claim 3 wherein said communications device includes a 

2 telephone. 

1 5. The system of claim 3 wherein said communications device includes a 

2 computer system having an audio input device. 
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1 6. The system of claim 5 wherein said audio input device includes a 

2 microphone. 

1 7. The system of claim 1 wherein said security module includes: 

2 an identification module to identify said security related information received by said 

3 network interface from said secure network site; 

4 a communications module to facilitate communications with said security system and 

5 said network interface, wherein said communications module includes: 

6 a send module to provide said user information and said identified security 

7 information to said security system to facilitate verification of said user and negotiation of 

8 said communication parameters; 

9 a receive module to receive a request for said user information, verification 

1 0 results, responses to said identified security information and said negotiated communication 

1 1 parameters from said security system; and 

12- an interface module for providing said responses and said negotiated 

13 parameters to said network interface to facilitate secure communications over said network 

14 between said secure network site and said network interface; and 

15 a user interface module to facilitate said user information request for retrieval of said 

1 6 user information and to provide said verification results to said user. 

1 8. The system of claim 7 wherein said security system includes: 

2 an identification verification module to validate an identification within said user 

3 information associated with an authorized system user; 

4 an access module to retrieve said voice information from said storage unit associated 

5 with said identification; 

6 a selection module to select portions of said retrieved voice information and generate 

7 said user information request, wherein said generated request includes a request for user 

8 information corresponding to said selected portions of said retrieved voice information; 

9 a voice verification module to verify said user by comparing said user voice signals 

10 received from said security module in response to said user information request with said 

11 stored voice information associated with an authorized user identified by said identification; 
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12 a security access module to retrieve security information for said verified user from 

1 3 said storage unit; 

1 4 a security negotiation module to process said identified security information received 

15 from said security module and generate said responses thereto with said retrieved security 

16 information to negotiate said communication parameters; and 

17 a security communications module to facilitate communications with said security 

1 8 module, wherein said security communications module includes: 

19 a security send module to provide said user information request, said 

20 verification results, said generated responses and said negotiated parameters to said security 

21 module; and 

22 a security receive module to receive said user voice signals and said identified 

23 security information from said security module. 

1 9. The system of claim 1 wherein said storage unit includes a database. 

1 10. The system of claim 2 wherein said stored security information includes 

2 private keys and certificates of said authorized system users. 

1 11. The system of claim 1 further including: 

2 an enrollment module to retrieve voice signals from said authorized system users and 

3 process said authorized system user voice signals to produce said voice information for 

4 storage in said storage unit. 

1 12. A program product apparatus having a computer readable medium with 

2 computer program logic recorded thereon for facilitating secure communications over a 

3 network, wherein said network is accessed by a network interface receiving voice signals from 

4 a user and accessing and navigating said network in accordance with said received voice 

5 signals, said program product apparatus comprising: 

6 a security module to facilitate retrieval of information from said user in the form of 

7 voice signals and to identify security related information received by said network interface 

8 from a secure network site in response to accessing said secure network site; 
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9 a storage module to store voice and security information associated with authorized 

10 users; and 

1 1 a secure communications module in communication with said security module and 

12 said storage module to verify said user as an authorized user based on a comparison of said 

1 3 user voice signals with said stored voice information and to retrieve said security information 

1 4 of said verified user from said storage module and negotiate communication parameters with 

1 5 said secure network site in response to said identified security information received from said 

1 6 security module to facilitate secure communications over said network between that site and 

17 said network interface. 

1 13. The program product apparatus of claim 12 wherein said security module 

2 includes: 

3 ; an identification module to identify said security related information received by said 

4 = network interface from said secure network site; 

5 a communications module to facilitate communications with said secure 
6 communications module and said network interface, wherein said communications module 

7 includes: 

8 a send module to provide said user information and said identified security 

9 information to said secure communications module to facilitate verification of said user and 

1 0 - negotiation of said communication parameters; 

1 1 a receive module to receive a request for said user information, verification 

12 results, responses to said identified security information and said negotiated communication 

13 parameters from said secure communications module; and 

14 an interface module for providing said responses and said negotiated 

1 5 parameters to said network interface to facilitate secure communications over said network 

1 6 between said secure network site and said network interface; and 

17 a user interface module to facilitate said user information request for retrieval of said 

1 8 user information and to provide said verification results to said user. 

1 14. The program product apparatus of claim 13 wherein said secure 

2 communications module includes: 
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3 an identification verification module to validate an identification within said user 

4 information associated with an authorized user; 

5 an access module to retrieve said voice information from said storage module 

6 associated with said identification; 

7 a selection module to select portions of said retrieved voice information and generate 

8 said user information request, wherein said generated request includes a request for user 

9 information corresponding to said selected portions of said retrieved voice information; 

1 0 a voice verification module to verify said user by comparing said user voice signals 

1 1 received from said security module in response to said user information request with said 

1 2 stored voice information associated with an authorized user identified by said identification; 

13 a security access module to retrieve security information for said verified user from 

14 said storage module; 

15 a security negotiation module to process said identified security information received 

16 from said security module and generate said responses thereto with said retrieved security 

17 information to negotiate said communication parameters; and 

18 a security communications module to facilitate communications with said security 

19 module, wherein said security communications module includes: 

20 a security send module to provide said user information request, said 

21 verification results, said generated responses and said negotiated parameters to said security 

22 module; and 

23 a security receive module to receive said user voice signals and said identified 

24 security information from said security module. 

1 15. The program product apparatus of claim 12 further including: 

2 an enrollment module to retrieve voice signals from said authorized users and process 

3 said authorized user voice signals to produce said voice information for storage in said storage 

4 module. 

1 16. A carrier signal having computer program logic embedded therein for 

2 facilitating secure communications over a network, wherein said network is accessed by a 
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3 network interface receiving voice signals from a user and accessing and navigating said 

4 network in accordance with said received voice signals, said carrier signal comprising: 

5 a security module to facilitate retrieval of information from said user in the form of 

6 voice signals and to identify security related information received by said network interface 

7 from a secure network site in response to accessing said secure network site; 

8 a storage module to store voice and security information associated with authorized 

9 users; and 

10 a secure communications module in communication with said security module and 

1 1 said storage module to verify said user as an authorized user based on a comparison of said 

1 2 user voice signals with said stored voice information and to retrieve said security information 

13 of said verified user from said storage module and negotiate communication parameters with 

1 4 said secure network site in response to said identified security information received from said 

1 5 ~ security module to facilitate secure communications over said network between that site and 

1 6 said network interface. 

1 17. The carrier signal of claim 1 6 wherein said security module includes: 

2 an identification module to identify said security related information received by said 

3 network interface from said secure network site; 

4 a communications module to facilitate communications with said secure 

5 communications module and said network interface, wherein said communications module 

6 includes: 

7 a send module to provide said user information and said identified security 

8 information to said secure communications module to facilitate verification of said user and 

9 negotiation of said communication parameters; 

10 a receive module to receive a request for said user information, verification 

1 1 results, responses to said identified security information and said negotiated communication 

12 parameters from said secure communications module; and 

13 an interface module for providing said responses and said negotiated 

14 parameters to said network interface to facilitate secure communications over said network 

15 between said secure network site and said network interface; and 
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1 6 a user interface module to facilitate said user information request for retrieval of said 

17 user information and to provide said verification results to said user. 

1 18. The carrier signal of claim 17 wherein said secure communications module 

2 includes: 

3 an identification verification module to validate an identification within said user 

4 information associated with an authorized user; 

5 an access module to retrieve said voice information from said storage module 

6 associated with said identification; 

7 a selection module to select portions of said retrieved voice information and generate 

8 said user information request, wherein said generated request includes a request for user 

9 information corresponding to said selected portions of said retrieved voice information; 
10" a voice verification module to verify said user by comparing said user voice signals 

1 1 received from said security module in response to said user information request with said 

1 2 stored voice information associated with an authorized user identified by said identification; 

13 a security access module to retrieve security information for said verified user from 

14 said storage module; 

1 5 a security negotiation module to process said identified security information received 

16 from said security module and generate said responses thereto with said retrieved security 

1 7 information to negotiate said communication parameters; and 

1 8 a security communications module to facilitate communications with said security 

19 module, wherein said security communications module includes: 

20 a security send module to provide said user information request, said 

2 1 verification results, said generated responses and said negotiated parameters to said security 

22 module; and 

23 a security receive module to receive said user voice signals and said identified 

24 security information from said security module. 

1 19. The carrier signal of claim 16 further including: 
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2 an enrollment module to retrieve voice signals from said authorized users and process 

3 said authorized user voice signals to produce said voice information for storage in said storage 

4 module. 

1 20. A method of facilitating secure communications over a network, wherein said 

2 network is accessed by a network interface receiving voice signals from a user and accessing 

3 and navigating said network in accordance with said received voice signals, said method 

4 comprising the steps of: 

5 (a) retrieving, via a security module, information from said user in the form of 

6 voice signals and identifying security related information received by said network interface 

7 from a secure network site in response to accessing said secure network site; 

8 (b) storing voice and security information associated with authorized users in a 

9 storage unit; 

1 0 (c) verifying said user as an authorized user based on a comparison of said user 

1 1 voice signals with said stored voice information via a security system; and 

1 2 (d) retrieving, via said security system, said security information of said verified 

13 user from said storage unit and negotiating communication parameters with said secure 

14 network site in response to said identified security information to facilitate secure 

1 5 communications over said network between that site and said network interface. 

1 21. The method of claim 20 wherein said network includes the Internet. 

1 22. The method of claim 20 wherein said network interface is in communication 

2 with a communications device located remotely of said network interface, and step (a) further 

3 includes: 

4 (a. 1) retrieving said user voice signals from said communications device. 

1 23. The method of claim 22 wherein said communications device includes a 

2 telephone. 
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24. The method of claim 22 wherein said communications device includes a 
computer system having an audio input device. 



1 25. The method of claim 24 wherein said audio input device includes a 

2 microphone. 

1 26. The method of claim 20 wherein step (a) further includes: 

2 (a. 1 ) providing said user information to said security system to facilitate verification 

3 of said user in response to a request from said security system for user information; 

4 (a.2) receiving verification results from said security system and providing said 

5 verification results to said user; 

6 (a.3) providing said identified security information to said security system to 

7 facilitate negotiation of said communication parameters; 

8 (a. 4) receiving responses to said identified security information and said negotiated 

9 communication parameters from said security system; and 

10 (a. 5) providing said responses and said negotiated parameters to said network 

1 1 interface to facilitate secure communications over said network between said secure network 

1 2 site and said network interface. 

1 27. The method of claim 26 wherein step (c) further includes: 

2 (c. 1) validating an identification within said user information associated with an 

3 authorized user; 

4 (c.2) retrieving said voice information from said storage unit associated with said 

5 identification; 

6 (c.3) selecting portions of said retrieved voice information and generating said user 

7 information request, wherein said generated request includes a request for user information 

8 corresponding to said selected portions of said retrieved voice information; and 

9 (c.4) verifying said user by comparing said user voice signals received from said 

10 security module in response to said user information request with said stored voice 

1 1 information associated with an authorized user identified by said identification and providing 

1 2 said verification results to said security module; and 
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1 3 step (d) further includes : 

14 (d.l) processing said identified security information received from said security 

1 5 module and generating said responses thereto with said retrieved security information to 

16 negotiate said communication parameters; and 

1 7 (d.2) providing said responses and negotiated parameters to said security module to 

1 8 facilitate secure communications over said network between said secure network site and said 

1 9 network interface . 

1 28. The method of claim 20 wherein said storage unit includes a database. 

1 29. The method of claim 2 1 wherein said stored security information includes 

2 private keys and certificates of said authorized users. 

1 30. The method of claim 20 further including the step of: 

2 (e) retrieving voice signals from said authorized users and processing said 

3 authorized user voice signals to produce said voice information for storage in said storage 

4 unit. 

1 3 1 . A system for facilitating secure communications over a network, wherein said 

2 network is accessed by a network interface receiving voice signals from a user and accessing 

3 and navigating said network in accordance with said received voice signals, said system 

4 comprising: 

5 a verification unit to verify said user as an authorized user based on a comparison of 

6 said user voice signals with stored voice information of authorized users; and 

7 a negotiation unit to retrieve security information of said verified user remotely stored 

8 from said network interface and negotiate communication parameters with a secure network 

9 site to facilitate secure communications over said network between that site and said network 
1 0 interface. 

1 32. The system of claim 3 1 wherein said network includes the Internet. 
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33. The system of claim 3 1 wherein said network interface is in communication 
with a communications device located remotely of said network interface to receive said user 
voice signals. 



1 34. A method of facilitating secure communications over a network, wherein said 

2 network is accessed by a network interface receiving voice signals from a user and accessing 

3 and navigating said network in accordance with said received voice signals, said method 

4 comprising the steps of: 

5 (a) verifying said user as an authorized user based on a comparison of said user 

6 voice signals with stored voice information of authorized users; and 

7 (b) retrieving security information of said verified user remotely stored from said 

8 network interface and negotiating communication parameters with a secure network site to 

9 facilitate secure communications over said network between that site and said network 
10 interface. 

1 35. The method of claim 34 wherein said network includes the Internet. 

1 36. The method of claim 34 wherein said network interface is in communication 

2 with a communications device located remotely of said network interface to receive said user 

3 voice signals. 
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